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ABSTRACT OF THE DISCLOSURE 


A memory management unit (MMU) is disclosed for managing a memory storing data 
arranged within a plurality of memory pages. The MMU includes a security check unit 
(SOU) receiving a physical address generated during execution of a current instruction. The 
5 physical address resides within a selected memory page. The SCU uses the physical address 
to access one or more security attribute data structures located in the memory to obtain a 
security attribute of the selected memory page, compares a numerical value conveyed by a 
security attribute of the cxirrent instruction to a numerical value conveyed by the security 
attribute of the selected memory page, and produces an output signal dependent upon a result 

10 of the comparison. The MMU accesses the selected memory page dependent upon the output 
signal. The security attribute of the selected memory page may include a security context 
identification (SCID) value indicating a security context level of the selected memory page. 
The security attribute of the current instruction may include an SCID value indicating a 
security context level of a memory page containing the current instruction. A central 

15 processing unit (CPU) is described including an execution unit and the MMU. A computer 
system is described including the memory, the CPU, and the MMU. A method is described 
for providing access security for a memory used to store data arranged within a plurality of 
memory pages. The method may be embodied within the MMU. 


20 


Page 40 of 40 


